Bugcrowd Blog

Travis Andrade

Recent Posts

Consistency is Key: Aligning Bugcrowd’s VRT with CVSS

Posted by Travis Andrade on Oct 10, 2017 10:00:00 AM

We are proud to announce the newest Crowdcontrol update, which now maps the open standard Vulnerability Rating Taxonomy (VRT) to the Common Vulnerability Scoring System (CVSS) v3, allowing organizations to manage submission severity with CVSS v3!

Read More
Product Updates

Cut Through The Noise; The Value of a Disclosure Program

Posted by Travis Andrade on Sep 27, 2017 10:00:00 AM

In talking with our customers, and particularly larger customers, we often hear of the need to establish an open, public, and passive channel for vulnerability disclosure from their users, customers, and the broader security community. These customers aren’t always ready for a public bug bounty but they may already have an existing security@ email address. They often have an existing security page and want the ability to accept disclosures directly from their website.

Read More
Product Updates

Quickly Identify and Take Action with Bugcrowd's Slack Integration

Posted by Travis Andrade on Aug 4, 2017 9:00:00 AM

The release of our newest integration with Slack now allows you to receive actionable bounty notifications immediately!

Organizations continue to transition to an agile software development lifecycle in today’s fast paced market where there is an increased need for developing applications quickly, efficiently, and securely. Our platform, Crowdcontrol, enables companies to seamlessly implement bug bounty programs into their SDLC by integrating with their everyday tools, such as Slack, to ensure organizations release secure software fast.

Read More
Product Updates

June 2017 Hall of Fame Results!!

Posted by Travis Andrade on Jul 6, 2017 10:10:35 AM

Bugcrowd is excited to announce our June 2017 Hall of Fame winners! 

At the top, mongo is in our first place spot again :), with Web_Plus following closely behind in second and ahmedehane rounding out our top three! To thank our top performers for their hard work, Bugcrowd is pleased to announce that all three researchers have received bonuses for their performance in the month of June.

  1. mongo - 844 points - $2,500 bonus 
  2. Web_Plus - 813 points - $1,500 bonus
  3. ahmedehane - 602 points - $1,000 bonus

Read More
Researcher Resources

Bugcrowd’s Spring Release Ensures the Long-Term Success of Bug Bounty Programs

Posted by Travis Andrade on Jun 22, 2017 1:08:35 PM

Our 2017 Spring Product Release improves vulnerability management for the enterprise and supports the long-term success of both security teams and researchers.

Read More
Product Updates

Bug Bounties vs. Penetration Testing: Misconception #2

Posted by Travis Andrade on May 31, 2017 4:40:24 PM
Misconception: With a bug bounty, you cannot receive the coverage or same caliber of testing methodologies as penetration tests. 
Read More

Track Vulnerability Trends and Drive Action with Updated Insights Dashboard

Posted by Travis Andrade on May 15, 2017 1:04:36 PM

Announcing a major update to our program reporting within the Insights dashboard

Read More
Product Updates

Product Update: Vulnerability Management Made Easy with the Most Intuitive and Efficient Bi-Directional JIRA Integration

Posted by Travis Andrade on Apr 20, 2017 12:00:00 PM

We are proud to announce the most intuitive and efficient bi-directional JIRA integration for bug bounty programs!

Read More
Product Updates

NEW Researcher Dashboard Delivers Actionable Performance Metrics

Posted by Travis Andrade on Apr 6, 2017 10:30:00 AM

 

Bugcrowd now delivers actionable performance metrics to the crowd!

Read More
Product Updates

Product Update: Enhanced Vulnerability Clarity with NEW Submission Form

Posted by Travis Andrade on Mar 3, 2017 10:00:00 AM

New Feature! VRT-enabled submission form drives enhanced vulnerability reporting

Read More
Product Updates